2020-07-10 00:58:55 +02:00
|
|
|
#include <tunables/global>
|
|
|
|
|
2021-09-25 16:03:23 +02:00
|
|
|
/opt/sublime_text*/sublime_text {
|
2020-07-10 00:58:55 +02:00
|
|
|
#include <abstractions/base>
|
|
|
|
#include <abstractions/X>
|
|
|
|
#include <abstractions/ibus>
|
|
|
|
#include <abstractions/dbus>
|
|
|
|
#include <abstractions/dbus-session>
|
|
|
|
#include <abstractions/dbus-accessibility>
|
|
|
|
#include <abstractions/dbus-session-strict>
|
|
|
|
#include <abstractions/gnome>
|
|
|
|
|
|
|
|
/usr/share/mate/applications/** r,
|
|
|
|
/usr/bin/caja rwix,
|
|
|
|
/usr/share/glib-*/schemas/** r,
|
|
|
|
/dev/null r,
|
|
|
|
|
|
|
|
/{dev,run}/{,shm/}** rwmkl,
|
2021-10-30 18:39:48 +02:00
|
|
|
/opt/sublime_text/ rwixmkl,
|
|
|
|
/opt/sublime_text/** rwixmkl,
|
2020-07-10 00:58:55 +02:00
|
|
|
|
2021-10-30 18:39:48 +02:00
|
|
|
owner @{HOME}/.config/sublime-text/ rwmkl,
|
|
|
|
owner @{HOME}/.config/sublime-text/** rwmkl,
|
|
|
|
owner @{HOME}/.cache/sublime-text/ rwmkl,
|
|
|
|
owner @{HOME}/.cache/sublime-text/** rwmkl,
|
2020-07-10 00:58:55 +02:00
|
|
|
owner @{HOME}/ rwmkl,
|
|
|
|
owner @{HOME}/** rwmkl,
|
2021-10-30 18:39:48 +02:00
|
|
|
owner /tmp/ rwmkl,
|
|
|
|
owner /tmp/** rwmkl,
|
2020-07-10 00:58:55 +02:00
|
|
|
|
|
|
|
deny network inet,
|
|
|
|
deny network inet6,
|
|
|
|
deny network raw,
|
|
|
|
}
|
|
|
|
|
2021-10-30 18:39:48 +02:00
|
|
|
/opt/sublime_text*/plugin_host {
|
2020-07-10 00:58:55 +02:00
|
|
|
#include <abstractions/base>
|
|
|
|
deny network inet,
|
|
|
|
deny network inet6,
|
|
|
|
deny network raw,
|
|
|
|
}
|